skills/membranedev/application-skills/gatherup/Socket

gatherup

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent with its stated GatherUp integration purpose and uses an official npm-distributed CLI, so it does not look overtly malicious. However, all authentication and API traffic are funneled through Membrane as an intermediary, creating meaningful third-party data-handling and credential-trust risk that is higher than a direct GatherUp integration.

Confidence: 85%Severity: 52%

Audit Metadata

Analyzed At

Apr 25, 2026, 03:03 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgatherup%2F@d0186c7ec27745cfa3999a12f5012eded385e8e8